Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Gentoo: GLSA-202301-24 Critical: CUPS Memory Overflow Vulnerability

gentoo
Calendar Grey November 12, 2007
Scroller Gentoo
A critical security notification regarding a severe vulnerability in CUPS that facilitates memory corruption, potentially enabling the execution of arbitrary code.
CUPS contains a boundary checking error that might lead to the execution of arbitrary code.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200711-16
                                            https://security.gentoo.org/

  Severity: High
     Title: CUPS: Memory corruption
      Date: November 12, 2007
      Bugs: #196736
        ID: 200711-16


Synopsis
=======
CUPS contains a boundary checking error that might lead to the
execution of arbitrary code.

Background
=========
CUPS provides a portable printing layer for UNIX-based operating
systems.

Affected packages
================
    -------------------------------------------------------------------
     Package         /   Vulnerable   /                     Unaffected
    -------------------------------------------------------------------
  1  net-print/cups      < 1.2.12-r2                      >= 1.2.12-r2

==========
Alin Rad Pop (Secunia Research) discovered an off-by-one error in the
ippReadIO() function when handling Internet Printing Protocol (IPP)
tags th...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity gentoo arbitrary code execution memory corruption cups

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory high severity gentoo arbitrary code execution memory corruption cups

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround